Firewall Admin / Engineer (Cybersecurity Technical Staff 1/2)
Los Alamos National Laboratory · Los Alamos, NM · 4 wk ago
Information Technology$88k–$143k/yrFull-time
We need to output HTML fragment with sections: About the role? The posting includes "What You Will Do", "Cybersecurity Technical Staff 1 - $87,800 - $143,000", "Cybersecurity Technical Staff 1 - $96,600 - $158,000", "What You Need", "Education/Experience", "Desired Qualifications", "Essential Job Functions", "Work Location", "Position commitment", "Note to Applicants", "Where You Will Work", "Our generous benefits package includes:", "Additional Details", etc.
We must use for section headings like About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. We should map content accordingly. We need to include sections only when posting has real specific content.
We need to preserve all substantive info, not invent or summarize away detail. Remove boilerplate like EEO, legal, etc. Also remove application instructions (cover letter requirement? That's application instruction; we should drop). Also remove duplicated lines.
We need to include Pay section if posting actually states them. Yes: there are salary ranges for each level. So we can have Pay section with those ranges.
Schedule? Not mentioned explicitly except note about on-call rotation and occasional non-standard hours. That's schedule info. So we can include Schedule section with that.
Benefits: they list benefits package. So Benefits section.
Responsibilities: "What You Will Do" and the detailed tasks for each level. So we can have Responsibilities section.
Requirements: Minimum Job Requirements and Additional Job Requirements for level 2. Also Education/Experience. So Requirements section.
Qualifications: Desired Qualifications maybe.
Skills: maybe not separate; could combine with Requirements.
We need to avoid repeating job title as heading. Also not put Job ID etc.
We must output only HTML fragment, no /, no markdown fences.
Let's structure:
for section headings like About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. We should map content accordingly. We need to include sections only when posting has real specific content.
We need to preserve all substantive info, not invent or summarize away detail. Remove boilerplate like EEO, legal, etc. Also remove application instructions (cover letter requirement? That's application instruction; we should drop). Also remove duplicated lines.
We need to include Pay section if posting actually states them. Yes: there are salary ranges for each level. So we can have Pay section with those ranges.
Schedule? Not mentioned explicitly except note about on-call rotation and occasional non-standard hours. That's schedule info. So we can include Schedule section with that.
Benefits: they list benefits package. So Benefits section.
Responsibilities: "What You Will Do" and the detailed tasks for each level. So we can have Responsibilities section.
Requirements: Minimum Job Requirements and Additional Job Requirements for level 2. Also Education/Experience. So Requirements section.
Qualifications: Desired Qualifications maybe.
Skills: maybe not separate; could combine with Requirements.
We need to avoid repeating job title as heading. Also not put Job ID etc.
We must output only HTML fragment, no /, no markdown fences.
Let's structure:
About the role
maybe a paragraph summarizing role: "As a key member of the Edge Security Team..." etc.
But we need to preserve all substantive info; we can't omit details. However we can combine into sections.
We need to ensure we don't create sections with filler like "commensurate with experience". Not present.
Let's extract content.
First, "What You Will Do This position will be filled at either the Cybersecurity Technical Staff 1 or 2 level, depending on the skills of the selected candidate. Additional job responsibilities (outlined below) will be assigned if the candidate is hired at the higher level. As a key member of the Edge Security Team in the Infrastructure Service Division - Network Services Group (ISD-NS), you'll administer and maintain our core and perimeter firewalls while monitoring complex, mission-critical networks. You'll tackle some of the most challenging and rewarding work in the field, supporting the day-to-day operations of our team including firewalls, DNS, load balancers, remote access solutions, underlying network services, and cross-domain solutions across both unclassified and classified environments. If you're passionate about technology and security and want to make a real impact, we want to hear from you."
That's About the role.
Then we have two sub-sections for each level with responsibilities.
We could put Responsibilities section with - for each duty. Might need to separate level 1 and level 2.
We can include headings inside? Not allowed; only
for section headings. So we can't have subheadings besides . We could embed level info in list items.
We need to preserve all details; we can list responsibilities for level 1 and then for level 2 (additional). We'll include both.
Next, Requirements: Minimum Job Requirements (list). Additional Job Requirements for level 2 (list). Education/Experience (lower and higher). Could be part of Requirements.
Qualifications: Desired Qualifications list.
Skills: maybe not needed separate.
Benefits: list of benefits.
Pay: salary ranges.
Schedule: note about on-call rotation and occasional non-standard hours.
Work Location: location Los Alamos, NM, onsite.
Position commitment: 1 Year.
Note to Applicants: cover letter requirement etc - that's application instruction, should be removed.
Additional Details: includes Directive 206.2, clearance, drug test, etc. Some of that is legal/boilerplate; we need to remove cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate. The directive about clearance might be considered relevant? It's about clearance requirement; maybe keep as part of Requirements? But it's more about eligibility. The instruction says remove EEO/equal-opportunity/scam-warning boilerplate. The clearance info is not EEO; it's a requirement. Might keep as part of Requirements or a separate section like "Clearance & Eligibility". However we only allowed headings: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. We cannot add other headings. So we must fit clearance info into existing sections, perhaps Requirements or Qualifications.
Similarly, work location could be part of About the role or maybe a short paragraph; but we have no heading for location. Could embed in About the role.
Position commitment maybe also in About the role.
We must not invent sections; we must only use allowed headings. So we need to place all info under those headings.
Thus:
About the role
- include description of role, work location, position commitment, maybe note about on-call? Actually schedule covers on-call.
Responsibilities
- list duties for level 1 and level 2.
Requirements
- include minimum job requirements, additional for level 2, education/experience, clearance eligibility, drug test, etc.
Qualifications
- desired qualifications.
Benefits
- list benefits.
Pay
- salary ranges.
Schedule
- on-call rotation, occasional non-standard hours.
We must not include Skills heading if no specific content; we can omit.
Now ensure we preserve all substantive info.
Let's extract details.
About the role paragraph: include the initial description.
Also include work location: "The work location for this position is onsite and located in Los Alamos, NM. All work locations are at the discretion of management."
Position commitment: "Position commitment: Regular appointment employees are required to serve a period of continuous service in their current position in order to be eligible to apply for posted jobs throughout the Laboratory. If an employee has not served the time required, they may only apply for Laboratory jobs with the documented approval of their Division Leader. The position commitment for this position is 1 Year."
Also note about on-call rotation? That belongs to Schedule.
Also note about "Employee will be required to participate in an on-call rotation and work occasionally on non-standard hours (nights and weekends)" - schedule.
Also "While the posted salary range for each position is broad, it is highly unusual for selected applicants to be hired at the top end of the range and more common for selected candidates to grow into the full salary band over time." - maybe part of Pay.
Also "Due to federal restrictions contained in the current National Defense Authorization Act, citizens of the People's Republic of China, the Islamic Republic of Iran, the Democratic People's Republic of North Korea, and the Russian Federation, who are not Lawful Permanent Residents ("green card" holders) are prohibited from accessing facilities..." - that's eligibility restriction; could be part of Requirements.
Also "Clearance: Q (Position will be cleared to this level). Selected applicants will be subject to a background investigation conducted by or on behalf of the Federal Government, and must meet eligibility requirements* for access to classified matter. This position requires a Q clearance, and obtaining such clearance requires US Citizenship except in extremely rare circumstances. Dependent upon the position, additional authorization to access classified information may be required, which may or may not be available to dual citizens. Receipt of a Q clearance and additional access authorization ultimately is a decision of the Federal Government and not of Triad. Eligibility requirements: To obtain a clearance, an individual must be at least 18 years of age; U.S. citizenship is required except in very limited circumstances. See DOE Order 472.2 for additional information." - clearance info.
Also "New-Employment Drug Test: The Laboratory requires successful applicants to complete a new-employment drug test and maintains a substance abuse policy that includes random drug testing. Although New Mexico and other states have legalized the use of marijuana, use and possession of marijuana remain illegal under federal law. A positive drug test for marijuana will result in termination of employment, even if the use was pre-offer." - drug test.
Also "Regular position: Term status Laboratory employees applying for regular-status positions are converted to regular status." - maybe not needed.
Also "Equal Opportunity: ..." - EEO boilerplate, remove.
Also "To request such an accommodation, please send an email to applyhelp@lanl.gov or call (505)-664-6947." - accommodation request, maybe part of application instructions? Could be considered EEO/boilerplate; but it's about accommodation request; might be considered part of application process; but we are to remove application instructions. Probably drop.
Also "Where You Will Work Located in beautiful northern New Mexico, Los Alamos National Laboratory (LANL) is a multidisciplinary research institution engaged in strategic science on behalf of national security." - could be part of About the role.
Also "Our generous benefits package includes:" list.
Now compile.
Responsibilities: need to list all duties for level 1 and level 2.
Level 1 duties list:
- Respond to firewall requests
- Respond to service incidents / outages
- Implement Firewall policies
- Monitor firewall logs and alerts for security events and anomalies
- Perform basic troubleshooting of firewall connectivity issues
- Document firewall rule changes and maintain accurate configuration records
- Review and validate firewall rule requests for completeness and accuracy
- Support firewall performance monitoring and capacity planning activities
- Collaborate with cross-functional teams to resolve network security issues
- Maintain knowledge of current firewall technologies and security best practices
- Generate routine reports on firewall usage, traffic patterns, and rule utilization
Level 2 additional duties (in addition to level 1):
- OS upgrades
- Device configurations and standards
- Lead complex firewall implementation projects and migrations
- Perform advanced troubleshooting and root cause analysis for critical incidents
- Design and optimize firewall rulesets for performance and security
- Develop and maintain firewall configuration standards and best practices documentation
- Conduct security assessments and audits of firewall policies
We should combine: maybe list all duties, marking level 2 as additional.
We'll produce - for each.
Now Requirements: Minimum Job Requirements list:
- Hands-on experience with enterprise firewall technologies (e.g., Juniper, Palo Alto, Cisco ASA)
- Working knowledge of network protocols (TCP/IP, DNS, DHCP, VPN, routing protocols)
- Basic understanding of cybersecurity principles and defense-in-depth concepts
- Experience with network monitoring and troubleshooting tools
- Demonstrated analytical and problem-solving abilities with strong written and verbal communication skills
- Ability to work independently and as part of a team
Additional Job Requirements for level 2:
- Advanced experience in firewall administration and network security including leading firewall implementations, infrastructure upgrades, and related projects.
- Proficiency with multiple enterprise platforms and technologies such as Loadbalancers, VPNS, & DNS
- Strong understanding of compliance frameworks (NIST, DISA STIGs, FISMA, etc.)
- Demonstrated ability to perform complex root cause analysis and develop remediation strategies
- Experience with change management processes and presenting technical recommendations to leadership
- Knowledge of security architecture concepts like zero-trust and integration with related technologies (IDS/IPS, SIEM, proxies)
- Ability to work with minimal supervision and make critical decisions during high-pressure situations
Education/Experience lower level:
- Position requires a Bachelor's Degree in Computer Science, Information Systems or related field from an accredited institution and 2 years related experience; or, an equivalent combination of education and experience directly related to the occupation.
Education/Experience higher level:
for section headings. So we can't have subheadings besides . We could embed level info in list items.
We need to preserve all details; we can list responsibilities for level 1 and then for level 2 (additional). We'll include both.
Next, Requirements: Minimum Job Requirements (list). Additional Job Requirements for level 2 (list). Education/Experience (lower and higher). Could be part of Requirements.
Qualifications: Desired Qualifications list.
Skills: maybe not needed separate.
Benefits: list of benefits.
Pay: salary ranges.
Schedule: note about on-call rotation and occasional non-standard hours.
Work Location: location Los Alamos, NM, onsite.
Position commitment: 1 Year.
Note to Applicants: cover letter requirement etc - that's application instruction, should be removed.
Additional Details: includes Directive 206.2, clearance, drug test, etc. Some of that is legal/boilerplate; we need to remove cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate. The directive about clearance might be considered relevant? It's about clearance requirement; maybe keep as part of Requirements? But it's more about eligibility. The instruction says remove EEO/equal-opportunity/scam-warning boilerplate. The clearance info is not EEO; it's a requirement. Might keep as part of Requirements or a separate section like "Clearance & Eligibility". However we only allowed headings: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. We cannot add other headings. So we must fit clearance info into existing sections, perhaps Requirements or Qualifications.
Similarly, work location could be part of About the role or maybe a short paragraph; but we have no heading for location. Could embed in About the role.
Position commitment maybe also in About the role.
We must not invent sections; we must only use allowed headings. So we need to place all info under those headings.
Thus:
About the role
- include description of role, work location, position commitment, maybe note about on-call? Actually schedule covers on-call.
Responsibilities
- list duties for level 1 and level 2.
Requirements
- include minimum job requirements, additional for level 2, education/experience, clearance eligibility, drug test, etc.
Qualifications
- desired qualifications.
Benefits
- list benefits.
Pay
- salary ranges.
Schedule
- on-call rotation, occasional non-standard hours.
We must not include Skills heading if no specific content; we can omit.
Now ensure we preserve all substantive info.
Let's extract details.
About the role paragraph: include the initial description.
Also include work location: "The work location for this position is onsite and located in Los Alamos, NM. All work locations are at the discretion of management."
Position commitment: "Position commitment: Regular appointment employees are required to serve a period of continuous service in their current position in order to be eligible to apply for posted jobs throughout the Laboratory. If an employee has not served the time required, they may only apply for Laboratory jobs with the documented approval of their Division Leader. The position commitment for this position is 1 Year."
Also note about on-call rotation? That belongs to Schedule.
Also note about "Employee will be required to participate in an on-call rotation and work occasionally on non-standard hours (nights and weekends)" - schedule.
Also "While the posted salary range for each position is broad, it is highly unusual for selected applicants to be hired at the top end of the range and more common for selected candidates to grow into the full salary band over time." - maybe part of Pay.
Also "Due to federal restrictions contained in the current National Defense Authorization Act, citizens of the People's Republic of China, the Islamic Republic of Iran, the Democratic People's Republic of North Korea, and the Russian Federation, who are not Lawful Permanent Residents ("green card" holders) are prohibited from accessing facilities..." - that's eligibility restriction; could be part of Requirements.
Also "Clearance: Q (Position will be cleared to this level). Selected applicants will be subject to a background investigation conducted by or on behalf of the Federal Government, and must meet eligibility requirements* for access to classified matter. This position requires a Q clearance, and obtaining such clearance requires US Citizenship except in extremely rare circumstances. Dependent upon the position, additional authorization to access classified information may be required, which may or may not be available to dual citizens. Receipt of a Q clearance and additional access authorization ultimately is a decision of the Federal Government and not of Triad. Eligibility requirements: To obtain a clearance, an individual must be at least 18 years of age; U.S. citizenship is required except in very limited circumstances. See DOE Order 472.2 for additional information." - clearance info.
Also "New-Employment Drug Test: The Laboratory requires successful applicants to complete a new-employment drug test and maintains a substance abuse policy that includes random drug testing. Although New Mexico and other states have legalized the use of marijuana, use and possession of marijuana remain illegal under federal law. A positive drug test for marijuana will result in termination of employment, even if the use was pre-offer." - drug test.
Also "Regular position: Term status Laboratory employees applying for regular-status positions are converted to regular status." - maybe not needed.
Also "Equal Opportunity: ..." - EEO boilerplate, remove.
Also "To request such an accommodation, please send an email to applyhelp@lanl.gov or call (505)-664-6947." - accommodation request, maybe part of application instructions? Could be considered EEO/boilerplate; but it's about accommodation request; might be considered part of application process; but we are to remove application instructions. Probably drop.
Also "Where You Will Work Located in beautiful northern New Mexico, Los Alamos National Laboratory (LANL) is a multidisciplinary research institution engaged in strategic science on behalf of national security." - could be part of About the role.
Also "Our generous benefits package includes:" list.
Now compile.
Responsibilities: need to list all duties for level 1 and level 2.
Level 1 duties list:
- Respond to firewall requests
- Respond to service incidents / outages
- Implement Firewall policies
- Monitor firewall logs and alerts for security events and anomalies
- Perform basic troubleshooting of firewall connectivity issues
- Document firewall rule changes and maintain accurate configuration records
- Review and validate firewall rule requests for completeness and accuracy
- Support firewall performance monitoring and capacity planning activities
- Collaborate with cross-functional teams to resolve network security issues
- Maintain knowledge of current firewall technologies and security best practices
- Generate routine reports on firewall usage, traffic patterns, and rule utilization
Level 2 additional duties (in addition to level 1):
- OS upgrades
- Device configurations and standards
- Lead complex firewall implementation projects and migrations
- Perform advanced troubleshooting and root cause analysis for critical incidents
- Design and optimize firewall rulesets for performance and security
- Develop and maintain firewall configuration standards and best practices documentation
- Conduct security assessments and audits of firewall policies
We should combine: maybe list all duties, marking level 2 as additional.
We'll produce - for each.
Now Requirements: Minimum Job Requirements list:
- Hands-on experience with enterprise firewall technologies (e.g., Juniper, Palo Alto, Cisco ASA)
- Working knowledge of network protocols (TCP/IP, DNS, DHCP, VPN, routing protocols)
- Basic understanding of cybersecurity principles and defense-in-depth concepts
- Experience with network monitoring and troubleshooting tools
- Demonstrated analytical and problem-solving abilities with strong written and verbal communication skills
- Ability to work independently and as part of a team
Additional Job Requirements for level 2:
- Advanced experience in firewall administration and network security including leading firewall implementations, infrastructure upgrades, and related projects.
- Proficiency with multiple enterprise platforms and technologies such as Loadbalancers, VPNS, & DNS
- Strong understanding of compliance frameworks (NIST, DISA STIGs, FISMA, etc.)
- Demonstrated ability to perform complex root cause analysis and develop remediation strategies
- Experience with change management processes and presenting technical recommendations to leadership
- Knowledge of security architecture concepts like zero-trust and integration with related technologies (IDS/IPS, SIEM, proxies)
- Ability to work with minimal supervision and make critical decisions during high-pressure situations
Education/Experience lower level:
- Position requires a Bachelor's Degree in Computer Science, Information Systems or related field from an accredited institution and 2 years related experience; or, an equivalent combination of education and experience directly related to the occupation.
Education/Experience higher level:
About the role
- include description of role, work location, position commitment, maybe note about on-call? Actually schedule covers on-call.Responsibilities
- list duties for level 1 and level 2.Requirements
- include minimum job requirements, additional for level 2, education/experience, clearance eligibility, drug test, etc.Qualifications
- desired qualifications.Benefits
- list benefits.Pay
- salary ranges.Schedule
- on-call rotation, occasional non-standard hours. We must not include Skills heading if no specific content; we can omit. Now ensure we preserve all substantive info. Let's extract details. About the role paragraph: include the initial description. Also include work location: "The work location for this position is onsite and located in Los Alamos, NM. All work locations are at the discretion of management." Position commitment: "Position commitment: Regular appointment employees are required to serve a period of continuous service in their current position in order to be eligible to apply for posted jobs throughout the Laboratory. If an employee has not served the time required, they may only apply for Laboratory jobs with the documented approval of their Division Leader. The position commitment for this position is 1 Year." Also note about on-call rotation? That belongs to Schedule. Also note about "Employee will be required to participate in an on-call rotation and work occasionally on non-standard hours (nights and weekends)" - schedule. Also "While the posted salary range for each position is broad, it is highly unusual for selected applicants to be hired at the top end of the range and more common for selected candidates to grow into the full salary band over time." - maybe part of Pay. Also "Due to federal restrictions contained in the current National Defense Authorization Act, citizens of the People's Republic of China, the Islamic Republic of Iran, the Democratic People's Republic of North Korea, and the Russian Federation, who are not Lawful Permanent Residents ("green card" holders) are prohibited from accessing facilities..." - that's eligibility restriction; could be part of Requirements. Also "Clearance: Q (Position will be cleared to this level). Selected applicants will be subject to a background investigation conducted by or on behalf of the Federal Government, and must meet eligibility requirements* for access to classified matter. This position requires a Q clearance, and obtaining such clearance requires US Citizenship except in extremely rare circumstances. Dependent upon the position, additional authorization to access classified information may be required, which may or may not be available to dual citizens. Receipt of a Q clearance and additional access authorization ultimately is a decision of the Federal Government and not of Triad. Eligibility requirements: To obtain a clearance, an individual must be at least 18 years of age; U.S. citizenship is required except in very limited circumstances. See DOE Order 472.2 for additional information." - clearance info. Also "New-Employment Drug Test: The Laboratory requires successful applicants to complete a new-employment drug test and maintains a substance abuse policy that includes random drug testing. Although New Mexico and other states have legalized the use of marijuana, use and possession of marijuana remain illegal under federal law. A positive drug test for marijuana will result in termination of employment, even if the use was pre-offer." - drug test. Also "Regular position: Term status Laboratory employees applying for regular-status positions are converted to regular status." - maybe not needed. Also "Equal Opportunity: ..." - EEO boilerplate, remove. Also "To request such an accommodation, please send an email to applyhelp@lanl.gov or call (505)-664-6947." - accommodation request, maybe part of application instructions? Could be considered EEO/boilerplate; but it's about accommodation request; might be considered part of application process; but we are to remove application instructions. Probably drop. Also "Where You Will Work Located in beautiful northern New Mexico, Los Alamos National Laboratory (LANL) is a multidisciplinary research institution engaged in strategic science on behalf of national security." - could be part of About the role. Also "Our generous benefits package includes:" list. Now compile. Responsibilities: need to list all duties for level 1 and level 2. Level 1 duties list: - Respond to firewall requests - Respond to service incidents / outages - Implement Firewall policies - Monitor firewall logs and alerts for security events and anomalies - Perform basic troubleshooting of firewall connectivity issues - Document firewall rule changes and maintain accurate configuration records - Review and validate firewall rule requests for completeness and accuracy - Support firewall performance monitoring and capacity planning activities - Collaborate with cross-functional teams to resolve network security issues - Maintain knowledge of current firewall technologies and security best practices - Generate routine reports on firewall usage, traffic patterns, and rule utilization Level 2 additional duties (in addition to level 1): - OS upgrades - Device configurations and standards - Lead complex firewall implementation projects and migrations - Perform advanced troubleshooting and root cause analysis for critical incidents - Design and optimize firewall rulesets for performance and security - Develop and maintain firewall configuration standards and best practices documentation - Conduct security assessments and audits of firewall policies We should combine: maybe list all duties, marking level 2 as additional. We'll produce- for each. Now Requirements: Minimum Job Requirements list: - Hands-on experience with enterprise firewall technologies (e.g., Juniper, Palo Alto, Cisco ASA) - Working knowledge of network protocols (TCP/IP, DNS, DHCP, VPN, routing protocols) - Basic understanding of cybersecurity principles and defense-in-depth concepts - Experience with network monitoring and troubleshooting tools - Demonstrated analytical and problem-solving abilities with strong written and verbal communication skills - Ability to work independently and as part of a team Additional Job Requirements for level 2: - Advanced experience in firewall administration and network security including leading firewall implementations, infrastructure upgrades, and related projects. - Proficiency with multiple enterprise platforms and technologies such as Loadbalancers, VPNS, & DNS - Strong understanding of compliance frameworks (NIST, DISA STIGs, FISMA, etc.) - Demonstrated ability to perform complex root cause analysis and develop remediation strategies - Experience with change management processes and presenting technical recommendations to leadership - Knowledge of security architecture concepts like zero-trust and integration with related technologies (IDS/IPS, SIEM, proxies) - Ability to work with minimal supervision and make critical decisions during high-pressure situations Education/Experience lower level: - Position requires a Bachelor's Degree in Computer Science, Information Systems or related field from an accredited institution and 2 years related experience; or, an equivalent combination of education and experience directly related to the occupation. Education/Experience higher level: